AWS Security ChangesHomeSearch

AWS network-firewall documentation change

Service: network-firewall · 2025-08-13 · Documentation medium

File: network-firewall/latest/developerguide/logging-cw-logs.md

Summary

Added JSON formatting markers and updated CloudWatch Logs ARN examples

Security assessment

Improved documentation for logging permissions configuration. Enhances security documentation but doesn't fix vulnerabilities.

Diff

diff --git a/network-firewall/latest/developerguide/logging-cw-logs.md b/network-firewall/latest/developerguide/logging-cw-logs.md
index 0b2d2c78b..08ab5b42d 100644
--- a//network-firewall/latest/developerguide/logging-cw-logs.md
+++ b//network-firewall/latest/developerguide/logging-cw-logs.md
@@ -44,0 +45,6 @@ You must have the following permissions settings to configure your firewall to s
+JSON
+    
+
+****
+    
+    
@@ -71 +77 @@ You must have the following permissions settings to configure your firewall to s
-                    "CloudWatch Logs log group ARN"
+                "arn:aws:logs:us-east-1:123456789012:log-group:log-group-name"
@@ -101,0 +109,6 @@ The following view shows both standard CloudWatch permissions and the additional
+JSON
+    
+
+****
+    
+    
@@ -125 +138 @@ The following view shows both standard CloudWatch permissions and the additional
-                    "logs:DescribeLogGroups",
+                    "logs:DescribeLogGroups"
@@ -128 +141 @@ The following view shows both standard CloudWatch permissions and the additional
-                    "CloudWatch Logs log group ARN"
+                "arn:aws:logs:us-east-1:123456789012:log-group:log-group-name"